Beyond modernization
IBM Cloud Pak for Integration prepares SURA Peru for the future
Man looking through a window

Continue to decrease response times. Reduce the length of development cycles. Build a single layer of integration that unifies on-premises and cloud security.

The plan was clear: SURA Peru—part of Grupo SURA, a Latin American holding company with a strategic focus on diverse financial services—was ready to modernize its application infrastructure. A new integration appliance would address the issues quickly, but Cesar Chang, Vice President of Finance and IT (CFO/CTO) at SURA Peru, wanted to do more than speed things up and standardize security. He wanted to prepare SURA Peru for the future.

Peru, like several countries in the region, has faced technological challenges that have slowed the adoption of cloud, and Peruvian government regulations prevent companies from moving their business-critical data to cloud servers hosted in other countries. For Bernardino Bravo-Mejia, IT Corporate Manager at SURA Peru, and Carlos Candela, the company’s Chief Technology Architect, that meant a full shift to the cloud would be challenging. Regardless, the company’s vision was to be 100% cloud native.



Faster application deployments



Faster application response times

With IBM Cloud Pak for Integration, we can make major improvements in our infrastructure right now, while maintaining the portability to move to the cloud when regulation is more flexible. It’s an ideal approach for us. Carlos Candela Chief Technology Architect SURA Peru

But that didn’t mean the team couldn’t start getting ready for that shift. In fact, preparing for the cloud could give SURA Peru a competitive advantage in the future.

That’s why the company selected IBM Cloud Pak® for Integration on Red Hat® OpenShift® as the basis for its private cloud environment as well as its modernization project. Candela explains: “With IBM Cloud Pak for Integration, we can make major improvements in our infrastructure right now, while maintaining the portability to move to the cloud when regulation is more flexible. It’s an ideal approach for us.”

A strategic approach

IBM Business Partner Synopsis helped SURA Peru develop, test and deploy the solution, a modern microservices-based architecture that uses IBM® App Connect Enterprise technology, which is part of the IBM Cloud Pak for Integration platform. The modernization team made the strategic decision to take a containerized approach with the new architecture, thereby making it easier to develop and deploy new integrations by reusing existing components. Containerization also adds to the scalability and resiliency of the infrastructure, and it can help streamline the process of moving to the cloud in the future.

As a pension fund administrator, SURA Peru handles a lot of critical financial information, so it must build security into everything it does. In the past, the organization addressed security on a case-by-case basis, developing a separate security layer for each new application it developed. As part of the modernization project, Bravo-Mejia and the team implemented the IBM DataPower® Gateway solution, which helps protect SURA Peru’s data by standardizing security policies across applications and sending all traffic through a single point of entry. “It’s a more modern approach to security,” says Bravo-Mejia.

We’re looking forward to the journey, and we’re glad to have IBM on our side. Bernardino Bravo-Mejia IT Corporate Manager SURA Peru
Designed for speed, security and a bright future

The solution is now in full production, and everyone is pleased with the success of the modernization project. With an integrated security layer, the team is much better able to manage security for the entire organization. Speed, too, has improved substantially. Response times have gone from over three seconds to just 600 milliseconds — an improvement that translates to better customer service, a key differentiator in Peru’s highly competitive pension fund industry.

Developing and deploying new cloud applications has also become faster and easier thanks to the new container-based integration platform. SURA Peru can now deploy a new application in less than half the time required previously. But that’s only the beginning. Candela explains: “Each new API we develop can be leveraged and redeployed for other services, which means we’ll continue to get faster and more efficient as we go along.” Together, these capabilities position SURA Peru to convert to a fully API-based company in the near future.

The IBM Cloud Pak solution has helped modernize SURA Peru’s on-premises application infrastructure, speeding up processes and enhancing security. And when regulations and capabilities allow, the solution will support SURA Peru’s move to the cloud with the flexibility, scalability and support Bravo-Mejia and his team have come to expect. “We’re looking forward to the journey,” says Bravo-Mejia, “and we’re glad to have IBM on our side.”

Sura logo
About Grupo Sura Peru

Based in Lima, SURA Peru (link resides outside is a pension fund administrator. For more than 25 years, it has helped working Peruvians develop and achieve their retirement savings goals. Its parent company, Grupo SURA, has operations throughout Latin America, serving more than 39 million clients and managing assets of more than USD 163 billion.

About Synopsis

IBM Business Partner Synopsis (link resides outside provides a wide range of IT services, including service-oriented architecture (SOA) implementation, application integration, infrastructure support and consulting services. Synopsis has been an accredited IBM Training Provider since the early 2000s. From its headquarters in Lima, Peru, Synopsis operates in Latin America, North America and Europe.

Take the next step

To learn more about the IBM solutions featured in this story, please contact your IBM representative or IBM Business Partner.

View more case studies Contact IBM

© Copyright IBM Corporation 2021. IBM Corporation, IBM Cloud, New Orchard Road, Armonk, NY 10504

Produced in the United States of America, March 2021.

IBM, the IBM logo,, IBM Cloud Pak, and DataPower are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at “Copyright and trademark information” at

Red Hat® and OpenShift® are trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the United States and other countries.

This document is current as of the initial date of publication and may be changed by IBM at any time. Not all offerings are available in every country in which IBM operates.

The performance data and client examples cited are presented for illustrative purposes only. Actual performance results may vary depending on specific configurations and operating conditions. THE INFORMATION IN THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WITHOUT ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-INFRINGEMENT. IBM products are warranted according to the terms and conditions of the agreements under which they are provided.

Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM DOES NOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES ARE IMMUNE FROM, OR WILL MAKE YOUR ENTERPRISE IMMUNE FROM, THE MALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY.